Privacy Policy

This English version is provided for convenience. If it differs from the Japanese version, the Japanese version prevails. SHANNON LIMITED LIABILITY COMPANY (“we”) handles personal information collected through SealGate (the “Service”), a passkey authentication platform, as follows.

1. Information we collect

• Inquiries: the company name, name, email address, phone number and message entered in the form
• Customer information: the email address, display name and company name of staff who log in to the dashboard. A password hash if they sign up with an email address and password; the email address and display name received from Google or GitHub if they log in with those accounts; passkey public keys if they log in with a passkey
• Payment information: billing details and payment status. Card numbers are collected by our payment processor (Stripe), and we do not receive them
• Authentication information: for users of the customer’s service, the user ID assigned by the customer, passkey public keys, authenticator types, and the dates and times of registrations and logins. The customer holds users’ data such as names and email addresses, and we do not receive it
• Technical information: IP addresses, browser type, API call records, and occurrences of errors
• Access information: how the Service’s sites are viewed (through Google Analytics), and the referring site, advertising parameters (UTM) and first page opened on your first visit

2. How we use it

• Providing the Service, authentication and billing
• Compiling usage statistics and reporting them to customers
• Analysing and improving the use of our sites
• Detecting and handling incidents, and preventing abuse
• Responding to inquiries

3. Sharing and processors

We do not provide personal information to third parties except as required by law. To provide the Service, we entrust processing to the following companies.

• Vercel Inc. (application hosting)
• Neon Inc. (database)
• Resend, Inc. (sending email)
• Stripe, Inc. (payments)
• Functional Software, Inc. (Sentry; error collection)
• Google LLC (access analysis with Google Analytics, and login with Google accounts)
• GitHub, Inc. (login with GitHub accounts)

These companies are located outside Japan. When entrusting processing to them, we require appropriate security measures by contract.

4. Security

All communication is encrypted. API keys are stored as hashes, so we cannot know the original values. Passkey private keys never leave users’ devices; we hold only the public keys. Each customer’s data is separated at the row level in the database.

5. Access, correction and deletion

Customers and their users can request disclosure, correction or deletion of their own personal information. Please contact us through the contact form. We respond within a reasonable period after verifying your identity.

6. Cookies

The Service’s sites use the following cookies.

• sg_session: keeps you logged in to the dashboard (12 hours)
• sg_org: the organization you last opened in the dashboard (180 days)
• sg_lang: the display language (1 year)
• sg_attr: the referring site, advertising parameters and first page opened on your first visit (30 days). Copied to your organization’s records when you sign up
• Google Analytics cookies (such as _ga): counting how the sites are viewed. See Google’s privacy policy for how Google handles the information. You can stop sending it with the Google Analytics Opt-out Browser Add-on

We also use cookies that expire within an hour to keep the state of a login or passkey registration in progress.

7. Changes

We may revise this policy in response to changes in laws or in the Service. The revised policy applies from when it is posted on this page.

8. Contact

SHANNON LIMITED LIABILITY COMPANY
2-17-8 Ikebukuro, Toshima-ku, Tokyo 171-0014, Japan
contact@shannon.co.jp